Python: auto model

2026-05-21 14:47:10 +02:00 · 2023-10-20 15:06:05 +02:00
parent 6425a810ad
commit addcd12107
55 changed files with 501 additions and 0 deletions
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-astropy.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-astropy.model.yml
@@ -19,3 +19,6 @@ extensions:
  - - io.StringIO~Subclass
    - astropy
    - Member[io].Member[ascii].Member[ui].Member[StringIO]
+  - - pickle~Alias
+    - astropy
+    - Member[io].Member[votable].Member[validator].Member[result].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-babel.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-babel.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - babel
+    - Member[localedata].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-beaker.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-beaker.model.yml
@@ -0,0 +1,24 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - beaker
+    - Member[_compat].Member[pickle]
+  - - pickle~Alias
+    - beaker
+    - Member[ext].Member[database].Member[pickle]
+  - - pickle~Alias
+    - beaker
+    - Member[ext].Member[google].Member[pickle]
+  - - pickle~Alias
+    - beaker
+    - Member[ext].Member[mongodb].Member[pickle]
+  - - pickle~Alias
+    - beaker
+    - Member[ext].Member[redisnm].Member[pickle]
+  - - pickle~Alias
+    - beaker
+    - Member[ext].Member[sqla].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-billiard.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-billiard.model.yml
@@ -19,6 +19,12 @@ extensions:
  - - pickle.load~Alias
    - billiard
    - Member[common].Member[pickle_load]
+  - - pickle~Alias
+    - billiard
+    - Member[common].Member[cpickle]
  - - pickle~Alias
    - billiard
    - Member[common].Member[pickle]
+  - - pickle~Alias
+    - billiard
+    - Member[common].Member[pypickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-bottle.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-bottle.model.yml
@@ -7,6 +7,9 @@ extensions:
  - - io.StringIO~Subclass
    - bottle
    - Member[BytesIO]
+  - - pickle~Alias
+    - bottle
+    - Member[pickle]
  - - urllib.parse.SplitResult~Subclass
    - bottle
    - Member[SplitResult]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-cachecontrol.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-cachecontrol.model.yml
@@ -13,6 +13,12 @@ extensions:
  - - http.client.HTTPResponse~Subclass
    - cachecontrol
    - Member[serialize].Member[HTTPResponse]
+  - - pickle~Alias
+    - cachecontrol
+    - Member[compat].Member[pickle]
+  - - pickle~Alias
+    - cachecontrol
+    - Member[serialize].Member[pickle]
  - - requests.models.Response~Subclass
    - cachecontrol
    - Member[adapter].Member[Response]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-cachelib.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-cachelib.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - cachelib
+    - Member[serializers].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-construct.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-construct.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - construct
+    - Member[core].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-coverage.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-coverage.model.yml
@@ -10,3 +10,6 @@ extensions:
  - - io.StringIO~Subclass
    - coverage
    - Member[debug].Member[StringIO]
+  - - pickle~Alias
+    - coverage
+    - Member[backward].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-deepdiff.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-deepdiff.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - deepdiff
+    - Member[serialization].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-dictobj.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-dictobj.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - dictobj
+    - Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-django.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-django.model.yml
@@ -730,6 +730,9 @@ extensions:
  - - pickle~Alias
    - django
    - Member[core].Member[cache].Member[backends].Member[filebased].Member[pickle]
+  - - pickle~Alias
+    - django
+    - Member[core].Member[cache].Member[backends].Member[locmem].Member[pickle]
  - - pickle~Alias
    - django
    - Member[core].Member[serializers].Member[base].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-djgeojson.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-djgeojson.model.yml
@@ -10,3 +10,6 @@ extensions:
  - - Django.Forms.Field~Subclass
    - djgeojson
    - Member[fields].Member[JSONField]
+  - - Django.Forms.Field~Subclass
+    - djgeojson
+    - Member[fields].Member[JSONFormField]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-flask_caching.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-flask_caching.model.yml
@@ -16,3 +16,9 @@ extensions:
  - - markupsafe.Markup~Subclass
    - flask_caching
    - Member[Markup]
+  - - pickle~Alias
+    - flask_caching
+    - Member[backends].Member[memcache].Member[pickle]
+  - - pickle~Alias
+    - flask_caching
+    - Member[backends].Member[rediscache].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-formtools.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-formtools.model.yml
@@ -31,3 +31,6 @@ extensions:
  - - django.forms.BaseForm~Subclass
    - formtools
    - Member[wizard].Member[views].Member[ManagementForm]
+  - - pickle~Alias
+    - formtools
+    - Member[utils].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-github3.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-github3.model.yml
@@ -10,6 +10,9 @@ extensions:
  - - io.StringIO~Subclass
    - github3
    - Member[decorators].Member[RequestsStringIO]
+  - - io.StringIO~Subclass
+    - github3
+    - Member[decorators].Member[StringIO]
  - - requests.models.Response~Subclass
    - github3
    - Member[decorators].Member[Response]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-gotenberg_client.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-gotenberg_client.model.yml
@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - httpx.Client~Subclass
+    - gotenberg_client
+    - Member[_base].Member[Client]
+  - - httpx.Client~Subclass
+    - gotenberg_client
+    - Member[_client].Member[Client]
+  - - httpx.Client~Subclass
+    - gotenberg_client
+    - Member[_merge].Member[Client]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-helusers.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-helusers.model.yml
@@ -13,6 +13,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - helusers
    - Member[models].Member[AbstractUser]
+  - - Django.db.models.Model~Subclass
+    - helusers
+    - Member[models].Member[DjangoAbstractUser]
  - - Django.db.models.Model~Subclass
    - helusers
    - Member[models].Member[Group]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-huey.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-huey.model.yml
@@ -7,3 +7,6 @@ extensions:
  - - io.StringIO~Subclass
    - huey
    - Member[serializer].Member[BytesIO]
+  - - pickle~Alias
+    - huey
+    - Member[serializer].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-jieba.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-jieba.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - jieba
+    - Member[finalseg].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-jinja2.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-jinja2.model.yml
@@ -52,6 +52,9 @@ extensions:
  - - markupsafe.Markup~Subclass
    - jinja2
    - Member[utils].Member[Markup]
+  - - pickle~Alias
+    - jinja2
+    - Member[_compat].Member[pickle]
  - - pickle~Alias
    - jinja2
    - Member[bccache].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-joblib.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-joblib.model.yml
@@ -10,3 +10,57 @@ extensions:
  - - io.StringIO~Subclass
    - joblib
    - Member[pool].Member[BytesIO]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[_memmapping_reducer].Member[loads]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[cloudpickle].Member[loads]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[cloudpickle_fast].Member[loads]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[loads]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[externals].Member[loky].Member[backend].Member[reduction].Member[loads]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[externals].Member[loky].Member[cloudpickle_wrapper].Member[loads]
+  - - pickle.loads~Alias
+    - joblib
+    - Member[parallel].Member[loads]
+  - - pickle.load~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[cloudpickle].Member[load]
+  - - pickle.load~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[cloudpickle_fast].Member[load]
+  - - pickle.load~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[load]
+  - - pickle~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[cloudpickle].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[cloudpickle_fast].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[compat].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[externals].Member[cloudpickle].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[hashing].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[numpy_pickle].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[numpy_pickle_compat].Member[pickle]
+  - - pickle~Alias
+    - joblib
+    - Member[numpy_pickle_utils].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-lark.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-lark.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - lark
+    - Member[lark].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-ledger.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-ledger.model.yml
@@ -10,6 +10,9 @@ extensions:
  - - Django.Forms.Field~Subclass
    - ledger
    - Member[payment].Member[forms].Member[BankcardExpiryMonthField]
+  - - Django.Forms.Field~Subclass
+    - ledger
+    - Member[payment].Member[forms].Member[BankcardMonthField]
  - - Django.Forms.Field~Subclass
    - ledger
    - Member[payment].Member[forms].Member[BankcardNumberField]
@@ -121,6 +124,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[accounts].Member[models].Member[Version]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[address].Member[models].Member[AbstractCountry]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[address].Member[models].Member[AbstractUserAddress]
@@ -142,12 +148,21 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[basket].Member[models].Member[AbstractBasket]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[basket].Member[models].Member[AbstractLineAttribute]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[basket].Member[models].Member[AbstractLine]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[basket].Member[models].Member[Basket]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[basket].Member[models].Member[CoreAbstractBasket]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[basket].Member[models].Member[CoreAbstractLine]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[basket].Member[models].Member[LineAttribute]
@@ -202,6 +217,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[catalogue].Member[models].Member[Category]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[catalogue].Member[models].Member[CoreAbstractProduct]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[catalogue].Member[models].Member[Option]
@@ -292,6 +310,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[licence].Member[models].Member[RevisionedMixin]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[order].Member[models].Member[AbstractBillingAddress]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[order].Member[models].Member[AbstractCommunicationEvent]
@@ -319,6 +340,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[order].Member[models].Member[AbstractPaymentEvent]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[order].Member[models].Member[AbstractShippingAddress]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[order].Member[models].Member[AbstractShippingEventType]
@@ -331,6 +355,12 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[order].Member[models].Member[CommunicationEvent]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[order].Member[models].Member[CoreAbstractLine]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[order].Member[models].Member[CoreAbstractOrder]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[order].Member[models].Member[LineAttribute]
@@ -400,6 +430,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[payments].Member[bpay].Member[facade].Member[BpayCollection]
+  - - Django.db.models.Model~Subclass
+    - ledger
+    - Member[payments].Member[bpay].Member[facade].Member[BpayFileTrailer]
  - - Django.db.models.Model~Subclass
    - ledger
    - Member[payments].Member[bpay].Member[facade].Member[BpayFile]
@@ -664,6 +697,9 @@ extensions:
  - - django.forms.BaseForm~Subclass
    - ledger
    - Member[accounts].Member[forms].Member[ProfileForm]
+  - - django.forms.BaseForm~Subclass
+    - ledger
+    - Member[payment].Member[forms].Member[AbstractAddressForm]
  - - django.forms.BaseForm~Subclass
    - ledger
    - Member[payment].Member[forms].Member[BankcardForm]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-lxml.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-lxml.model.yml
@@ -7,6 +7,9 @@ extensions:
  - - lxml.etree~Alias
    - lxml
    - Member[ElementInclude].Member[etree]
+  - - lxml.etree~Alias
+    - lxml
+    - Member[builder].Member[ET]
  - - lxml.etree~Alias
    - lxml
    - Member[html].Member[html5parser].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-markdown.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-markdown.model.yml
@@ -16,3 +16,6 @@ extensions:
  - - xml.etree.ElementTree~Subclass
    - markdown
    - Member[treeprocessors].Member[etree]
+  - - xml.etree.ElementTree~Subclass
+    - markdown
+    - Member[util].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-memcache.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-memcache.model.yml
@@ -7,3 +7,6 @@ extensions:
  - - io.StringIO~Subclass
    - memcache
    - Member[BytesIO]
+  - - pickle~Alias
+    - memcache
+    - Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-mercurial.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-mercurial.model.yml
@@ -37,9 +37,21 @@ extensions:
  - - io.StringIO~Subclass
    - mercurial
    - Member[url].Member[stringio]
+  - - io.StringIO~Subclass
+    - mercurial
+    - Member[util].Member[bytesio]
  - - io.StringIO~Subclass
    - mercurial
    - Member[util].Member[stringio]
  - - io.StringIO~Subclass
    - mercurial
    - Member[wireprotoserver].Member[stringio]
+  - - pickle~Alias
+    - mercurial
+    - Member[formatter].Member[pickle]
+  - - pickle~Alias
+    - mercurial
+    - Member[util].Member[pickle]
+  - - pickle~Alias
+    - mercurial
+    - Member[worker].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-nilearn.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-nilearn.model.yml
@@ -10,3 +10,6 @@ extensions:
  - - io.StringIO~Subclass
    - nilearn
    - Member[plotting].Member[html_stat_map].Member[BytesIO]
+  - - pickle~Alias
+    - nilearn
+    - Member[datasets].Member[utils].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-nipype.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-nipype.model.yml
@@ -0,0 +1,15 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - nipype
+    - Member[interfaces].Member[cmtk].Member[cmtk].Member[pickle]
+  - - pickle~Alias
+    - nipype
+    - Member[interfaces].Member[cmtk].Member[nx].Member[pickle]
+  - - pickle~Alias
+    - nipype
+    - Member[utils].Member[filemanip].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-paddle.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-paddle.model.yml
@@ -13,3 +13,30 @@ extensions:
  - - io.StringIO~Subclass
    - paddle
    - Member[framework].Member[io_utils].Member[BytesIO]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[auto_parallel].Member[static].Member[dist_saver].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[auto_parallel].Member[static].Member[planner_v2].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[auto_parallel].Member[static].Member[tuner].Member[profiler].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[auto_parallel].Member[static].Member[tuner].Member[rule_based_tuner].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[communication].Member[serialization_utils].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[rpc].Member[internal].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[distributed].Member[rpc].Member[rpc].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[framework].Member[io_utils].Member[pickle]
+  - - pickle~Alias
+    - paddle
+    - Member[jit].Member[api].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-paddlenlp.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-paddlenlp.model.yml
@@ -19,6 +19,12 @@ extensions:
  - - io.StringIO~Subclass
    - paddlenlp
    - Member[utils].Member[image_utils].Member[BytesIO]
+  - - pickle~Alias
+    - paddlenlp
+    - Member[taskflow].Member[utils].Member[pickle]
+  - - pickle~Alias
+    - paddlenlp
+    - Member[utils].Member[serialization].Member[pickle]
  - - pydantic.BaseModel~Subclass
    - paddlenlp
    - Member[server].Member[http_router].Member[router].Member[RequestBase]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pandas.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pandas.model.yml
@@ -49,3 +49,12 @@ extensions:
  - - lxml.etree~Alias
    - pandas
    - Member[io].Member[xml].Member[etree]
+  - - pickle~Alias
+    - pandas
+    - Member[compat].Member[pickle_compat].Member[pkl]
+  - - pickle~Alias
+    - pandas
+    - Member[core].Member[generic].Member[pickle]
+  - - pickle~Alias
+    - pandas
+    - Member[io].Member[pickle].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pdfminer.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pdfminer.model.yml
@@ -22,3 +22,6 @@ extensions:
  - - io.StringIO~Subclass
    - pdfminer
    - Member[pdfparser].Member[BytesIO]
+  - - pickle~Alias
+    - pdfminer
+    - Member[cmapdb].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pebble.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pebble.model.yml
@@ -0,0 +1,12 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - pebble
+    - Member[common].Member[pickle]
+  - - pickle~Alias
+    - pebble
+    - Member[pool].Member[process].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-permissionedforms.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-permissionedforms.model.yml
@@ -4,6 +4,9 @@ extensions:
    extensible: typeModel
    pack: codeql/python-all
  data:
+  - - django.forms.BaseForm~Subclass
+    - permissionedforms
+    - Member[PermissionedForm]
  - - django.forms.BaseForm~Subclass
    - permissionedforms
    - Member[PermissionedModelForm]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pip.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pip.model.yml
@@ -49,3 +49,9 @@ extensions:
  - - logging.Logger~Subclass
    - pip
    - Member[_internal].Member[utils].Member[_log].Member[VerboseLogger]
+  - - pickle~Alias
+    - pip
+    - Member[_vendor].Member[cachecontrol].Member[compat].Member[pickle]
+  - - pickle~Alias
+    - pip
+    - Member[_vendor].Member[cachecontrol].Member[serialize].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-playhouse.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-playhouse.model.yml
@@ -7,6 +7,9 @@ extensions:
  - - peewee.Database~Subclass
    - playhouse
    - Member[cockroachdb].Member[PooledCockroachDatabase]
+  - - peewee.Database~Subclass
+    - playhouse
+    - Member[cockroachdb].Member[PostgresqlDatabase]
  - - peewee.Database~Subclass
    - playhouse
    - Member[cockroachdb].Member[_PooledPostgresqlDatabase]
@@ -49,3 +52,9 @@ extensions:
  - - peewee.Database~Subclass
    - playhouse
    - Member[pool].Member[SqliteExtDatabase]
+  - - peewee.Database~Subclass
+    - playhouse
+    - Member[postgres_ext].Member[PostgresqlDatabase]
+  - - peewee.Database~Subclass
+    - playhouse
+    - Member[sqlite_ext].Member[SqliteDatabase]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pulpcore.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pulpcore.model.yml
@@ -697,6 +697,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - pulpcore
    - Member[app].Member[models].Member[access_policy].Member[AccessPolicy]
+  - - Django.db.models.Model~Subclass
+    - pulpcore
+    - Member[app].Member[models].Member[access_policy].Member[BaseGroup]
  - - Django.db.models.Model~Subclass
    - pulpcore
    - Member[app].Member[models].Member[access_policy].Member[BaseModel]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pydantic.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pydantic.model.yml
@@ -4,6 +4,9 @@ extensions:
    extensible: typeModel
    pack: codeql/python-all
  data:
+  - - pickle~Alias
+    - pydantic
+    - Member[deprecated].Member[parse].Member[pickle]
  - - pickle~Alias
    - pydantic
    - Member[parse].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-pymemcache.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-pymemcache.model.yml
@@ -7,3 +7,6 @@ extensions:
  - - io.StringIO~Subclass
    - pymemcache
    - Member[serde].Member[BytesIO]
+  - - pickle~Alias
+    - pymemcache
+    - Member[serde].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-red_commons.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-red_commons.model.yml
@@ -4,6 +4,9 @@ extensions:
    extensible: typeModel
    pack: codeql/python-all
  data:
+  - - logging.Logger~Subclass
+    - red_commons
+    - Member[logging].Member[RedTraceLogger]
  - - logging.Logger~Subclass
    - red_commons
    - Member[logging]Member[RedTraceLogger]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-reportlab.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-reportlab.model.yml
@@ -40,3 +40,6 @@ extensions:
  - - io.StringIO~Subclass
    - reportlab
    - Member[pdfbase].Member[ttfonts].Member[BytesIO]
+  - - pickle~Alias
+    - reportlab
+    - Member[lib].Member[utils].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-social_core.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-social_core.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - social_core
+    - Member[store].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-sqlitedict.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-sqlitedict.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle.loads~Alias
+    - sqlitedict
+    - Member[loads]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-svgwrite.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-svgwrite.model.yml
@@ -7,3 +7,6 @@ extensions:
  - - xml.etree.ElementTree~Subclass
    - svgwrite
    - Member[base].Member[etree]
+  - - xml.etree.ElementTree~Subclass
+    - svgwrite
+    - Member[etree].Member[etree]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-telebot.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-telebot.model.yml
@@ -7,3 +7,9 @@ extensions:
  - - io.StringIO~Subclass
    - telebot
    - Member[service_utils].Member[BytesIO]
+  - - pickle~Alias
+    - telebot
+    - Member[handler_backends].Member[pickle]
+  - - pickle~Alias
+    - telebot
+    - Member[storage].Member[pickle_storage].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-traits.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-traits.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - traits
+    - Member[has_traits].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-tweepy.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-tweepy.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - tweepy
+    - Member[cache].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-update_checker.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-update_checker.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - update_checker
+    - Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-urllib3.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-urllib3.model.yml
@@ -13,6 +13,9 @@ extensions:
  - - http.client.HTTPConnection~Subclass
    - urllib3
    - Member[connection].Member[VerifiedHTTPSConnection]
+  - - http.client.HTTPConnection~Subclass
+    - urllib3
+    - Member[connection].Member[_HTTPConnection]
  - - http.client.HTTPConnection~Subclass
    - urllib3
    - Member[connectionpool].Member[HTTPConnection]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-wagtail.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-wagtail.model.yml
@@ -25,6 +25,9 @@ extensions:
  - - Django.Forms.Field~Subclass
    - wagtail
    - Member[admin].Member[forms].Member[tags].Member[TagField]
+  - - Django.Forms.Field~Subclass
+    - wagtail
+    - Member[admin].Member[forms].Member[tags].Member[TaggitTagField]
  - - Django.Forms.Field~Subclass
    - wagtail
    - Member[admin].Member[panels].Member[BlockField]
@@ -256,6 +259,9 @@ extensions:
  - - Django.Views.View~Subclass
    - wagtail
    - Member[admin].Member[views].Member[generic].Member[models].Member[DeleteView]
+  - - Django.Views.View~Subclass
+    - wagtail
+    - Member[admin].Member[views].Member[generic].Member[models].Member[DjangoBaseDeleteView]
  - - Django.Views.View~Subclass
    - wagtail
    - Member[admin].Member[views].Member[generic].Member[models].Member[EditView]
@@ -391,6 +397,9 @@ extensions:
  - - Django.Views.View~Subclass
    - wagtail
    - Member[admin].Member[views].Member[pages].Member[lock].Member[UnlockView]
+  - - Django.Views.View~Subclass
+    - wagtail
+    - Member[admin].Member[views].Member[pages].Member[preview].Member[GenericPreviewOnEdit]
  - - Django.Views.View~Subclass
    - wagtail
    - Member[admin].Member[views].Member[pages].Member[preview].Member[PreviewOnCreate]
@@ -1546,6 +1555,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[images].Member[models].Member[UploadedImage]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[models].Member[AbstractPage]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[BaseLogEntry]
@@ -1576,6 +1588,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[ContentType]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[models].Member[DraftStateMixin]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[GroupApprovalTask]
@@ -1591,12 +1606,18 @@ extensions:
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[Locale]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[models].Member[LockableMixin]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[MP_Node]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[ModelLogEntry]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[models].Member[Orderable]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[PageLogEntry]
@@ -1612,6 +1633,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[ReferenceIndex]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[models].Member[RevisionMixin]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[Revision]
@@ -1621,6 +1645,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[TaskState]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[models].Member[Task]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[models].Member[TranslatableMixin]
@@ -1828,6 +1855,9 @@ extensions:
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[search].Member[backends].Member[database].Member[sqlite].Member[sqlite].Member[SQLiteFTSIndexEntry]
+  - - Django.db.models.Model~Subclass
+    - wagtail
+    - Member[search].Member[models].Member[AbstractIndexEntry]
  - - Django.db.models.Model~Subclass
    - wagtail
    - Member[search].Member[models].Member[AbstractMySQLIndexEntry]
@@ -1984,6 +2014,12 @@ extensions:
  - - django.forms.BaseForm~Subclass
    - wagtail
    - Member[admin].Member[forms].Member[auth].Member[AuthenticationForm]
+  - - django.forms.BaseForm~Subclass
+    - wagtail
+    - Member[admin].Member[forms].Member[auth].Member[DjangoPasswordChangeForm]
+  - - django.forms.BaseForm~Subclass
+    - wagtail
+    - Member[admin].Member[forms].Member[auth].Member[DjangoPasswordResetForm]
  - - django.forms.BaseForm~Subclass
    - wagtail
    - Member[admin].Member[forms].Member[auth].Member[LoginForm]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-whoosh.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-whoosh.model.yml
@@ -19,3 +19,30 @@ extensions:
  - - io.StringIO~Subclass
    - whoosh
    - Member[filedb].Member[structfile].Member[BytesIO]
+  - - pickle.loads~Alias
+    - whoosh
+    - Member[columns].Member[loads]
+  - - pickle.loads~Alias
+    - whoosh
+    - Member[compat].Member[loads]
+  - - pickle.loads~Alias
+    - whoosh
+    - Member[formats].Member[loads]
+  - - pickle.load~Alias
+    - whoosh
+    - Member[compat].Member[load]
+  - - pickle.load~Alias
+    - whoosh
+    - Member[externalsort].Member[load]
+  - - pickle.load~Alias
+    - whoosh
+    - Member[filedb].Member[structfile].Member[load_pickle]
+  - - pickle~Alias
+    - whoosh
+    - Member[compat].Member[pickle]
+  - - pickle~Alias
+    - whoosh
+    - Member[index].Member[pickle]
+  - - pickle~Alias
+    - whoosh
+    - Member[util].Member[loading].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-xgboost.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-xgboost.model.yml
@@ -7,3 +7,6 @@ extensions:
  - - io.StringIO~Subclass
    - xgboost
    - Member[plotting].Member[BytesIO]
+  - - pickle~Alias
+    - xgboost
+    - Member[rabit].Member[pickle]
--- a/python/ql/lib/semmle/python/frameworks/data/internal/auto-zmq.model.yml
+++ b/python/ql/lib/semmle/python/frameworks/data/internal/auto-zmq.model.yml
@@ -0,0 +1,9 @@
+# process-mrva-results 0.0.1
+extensions:
+- addsTo:
+    extensible: typeModel
+    pack: codeql/python-all
+  data:
+  - - pickle~Alias
+    - zmq
+    - Member[eventloop].Member[zmqstream].Member[pickle]